CVE-2011-0916: Buffer Overflow
Published Feb 8, 2011
·Updated
Stack-based buffer overflow in the SMTP service in IBM Lotus Domino allows remote attackers to execute arbitrary code via long arguments in a filename parameter in a malformed MIME e-mail message, aka SPR KLYH889M8H.
Affected Software
1 affected component
IBM Lotus Domino
Event History
Feb 8, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0916?
CVE-2011-0916 is rated as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2011-0916?
To remediate CVE-2011-0916, install the latest patches and updates provided by IBM for Lotus Domino.
3
What systems are affected by CVE-2011-0916?
CVE-2011-0916 affects IBM Lotus Domino versions vulnerable to stack-based buffer overflow in the SMTP service.
4
What type of attack does CVE-2011-0916 facilitate?
CVE-2011-0916 allows remote attackers to execute arbitrary code through crafted MIME e-mail messages.
5
Is CVE-2011-0916 easy to exploit?
Yes, CVE-2011-0916 can be exploited easily by sending specially crafted emails with long filename arguments.